What legislation exist in India regarding data protection security?

In India, data protection and security are primarily governed by the Information Technology Act, 2000, and its associated rules, particularly the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Additionally, the Personal Data Protection Bill, which aims to establish a comprehensive framework for data protection, is under discussion and seeks to regulate the processing of personal data and enhance individuals' rights over their information. The bill introduces principles such as data minimization, consent, and the establishment of a Data Protection Authority. However, as of now, the legislation is still in the legislative process and has not yet been enacted.